web-applications

What technologies and tools would you use to create a new user data driven web site?

HI, I’m an experienced c# / ms-sql developer that has been mostly focused on WinForms / backend data services using remoting / XML Web Services and now some WCF RESTful services. I also have experience with ASP.Net WebForms (although not with Ajax or MVC). I’m looking at creating a web site and wanted to get some input as to what t...

Problem Domain for Design Patterns

I was asked during an interview for an entry level coder position about how much I knew about design patterns. Actually, the interviewer brought out a hard-cover book (Design Patterns: Elements of Reusable Object-Oriented Software by Erich Gamma, Richard Helm, Ralph Johnson, and John Vlissides) and asked me, enthusiastically, if I had...

Subtle software security bugs in webapps

Im doing research on the capabilities of static analysis and at the moment I'm in the process of gathering code-snippets which contain subtle vulnerabilities. By that I mean not the obvious XSS and SQLI, but more subtle ones like below: $url = htmlspecialchars($_GET["url"]); echo "<a href=$url>Click here to continue</a>"; $url = htmls...

How to handle cross-domain requests in DWR 3.0

I used to handle cross-domain scripting in DWR 2.0 by setting the remoting method to ScriptTag through the dwr.engine.setRpcType(dwr.engine.ScriptTag); function and setting some initial parameters for the DWR servlet on the web.xml as described in the remoting options section on the official website. However, in DWR 3.0, the setRpcType...

WAR vs EAR for web application with no EJB?

I have a JEE web application that does not make use of EJBs. I am targeting Jetty/Tomcat for deployment some of the time and thus need a WAR packaging. However, I am also target JBoss and Websphere some of the time. My understanding is that full-blown JEE application servers can take either EAR or WAR formats. When would I use one ...

Externalizing Spring Security configuration?

I have a web application that works with several different configurations of Spring Security already. However, these difference configuration are all setup within my applicationContext configuration file. Therefore, in order to tweak these at a customer site, these would have to be modified INSIDE the WAR file. If customers manually m...

How do I make client browser stop requesting an expired session id?

I am developing a Java web application that will run on a secure intranet and does not require a user login. The application does, however, keep conversational state in an HttpSession. User input is not persisted to the database until they explicitly click a save button at some stage in the conversation. Until then, their input is retain...

Any significant reasons not to use AJAX?

I'm planning on making my web app quite AJAX heavy. Before I do, I'm wondering what people think of such sites. Are there any significant reasons not to do this? BTW, no need to mention SEO reasons. Also, I think the benefits make up for the fact that people without javascript will have a limited experience (though I'm open to being ...

Dashcode - Attributes Inspector - Design Guide?

In the Dashcode Inspector Window when you're on the Attributes tab with a Part selected there is a checkbox labeled "Design Guide". I'm trying to find out what that is for. Anyone know? It does not seem to be mentioned in the Dashcode User Guide. Are there any other docs for Dashcode 3? Thanks! ...

What should I call the label/field name for how often you can run into a bug in the wild?

I'm making a browser bug archive application and for each bug I want to have a field and corresponding values that identify the rarity of a bug. I could use rarity as the label and values 'high, medium/normal, low, edge-case' but when you say 'high rarity' it doesnt make much semantic sense... or is it me? If the values were something l...

Facebook starts over PHP or JAVA?

If Facebook were to start over what should it use PHP or JAVA (J2EE)? Why? Special considerations: Scaling Development speed Maintainability Development tools Development costs 3rd party applications Security Deployment speed ...

Choosing a web application framework (using Node.js)

I've recently "discovered" Node.js, and after I was finished having my mind blown, I started looking for a web application framework like Django or Codeigniter that uses Node.js. The main reasons I found online for using a Node.js-based framework were: Impressive scalability and speed, especially regarding simultaneous connections Same...

Switching links between multiple wars..

Hi All, We have a big application having 13 modules. We want to create war file for each module and deploy the app as an EAR. We navigate to different pages through top menu which contains link for all modules. Now problem is that each module have their own context. In order to switch the context we are using an external.jsp <html> <h...

Ruby vs Python when building high performance webapp

Hello there I'm building a high performance webapp, it needs a) good team scaling i.e. new team member needs to be able to quickly get started b) good app scaling, so the request load can grow I was thinking between RoR and ruby + postgres vs Python and some framework; I would like to avoid windows server administration and also I had...

How do I benchmark and profile IO bound Perl web application under heavy load?

How do I benchmark (compare two different implementations) and profile (find performance bottlenecks in an implementation) behavior of a web application (in Perl) under heavy load? This webapp is (supposedly) IO bound rather than CPU bound. I'd like to compare proposed implementation (proposed improvement) with current solution, either...

Facebook starts over PHP or JAVA?

I'm a business guy, and would like to understand some of the differences between these two technologies when they apply directly to Facebook, and the 6 points below. If Facebook were to start over what should it use PHP or JAVA? Why? Special considerations: Scaling Development speed Maintainability Development tools Development costs...

Is there an option in eclipse like "view servlet" in netbeans for jsp files?

If you work in netbeans you pretty much know the context menu entry "view servlet" on an jsp file. What it does is show you the generated servlet java code from the jsp. Is there something similar in eclipse? ...

jboss web application deploying but not found

Ok, trying to get a War deployed to JBoss 4.0.4.CR2 (no I can't upgrade) and I get no exceptions during startup, but whenever I try to access the application I get a 404. I've checked every log and I don't find any exceptions. Below is my web.xml file: <?xml version="1.0" encoding="UTF-8"?> <web-app version="2.4" xmlns="http://java.sun...

How to do Search Engine Optimization for Web Applications

I am currently developing a single-page web application that is focused on functionality. It doesn't really have or need long paragraphs of text, and those that are there are loaded dynamically via javascript and AJAX. Normally search engine optimization tips revolve around getting the right word count percentages, etc. But what are th...

Best practices for using Drools Expert/Flow in a Web Application

Hi I'm currently teaching myself Drools Expert/Flow as well as GWT. I want to use Drools Flow as an event/command bus and business rule engine to achieve loose coupling between different parts of the application. So far I've gotten both Expert and Flow working from my test cases, but I have a hard time figuring how to best implement Fl...